19 matches found
CVE-2024-10337
A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...
CVE-2024-10337
creationtimestamp| type| source ---|---|--- 2024-10-24 21:00:24+00:00| seen| https://t.me/cvedetector/8828...
CVE-2024-10337
A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...
CVE-2024-10337 SourceCodeHero Clothes Recommendation System home.php sql injection
A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...
de.tsystems.mms.apm:performance-signature-viewer (>=2.5.8, <=2.5.8.1), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.2.0-beta-1) +37 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (>=2.0, <=2.7)
org.jenkins-ci.plugins:token-macro MAVEN version =2.0, =2.5.8, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =0.3.0-beta-1, =1.1.0, =3.7.0, =1.1.7, =1.7.0, =2.0.0, =2.15, =2.18 and more Source cves: CVE-2019-10337 Source advisory: OSV:GHSA-G6H2-4X64-C59X...
org.jenkins-ci.plugins:email-ext (>=2.31, <=2.35.1), org.jenkins-ci.ruby-plugins:yammer (1.1.0) potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.8)
org.jenkins-ci.plugins:token-macro MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:email-ext =2.31, =2.35.1 - org.jenkins-ci.ruby-plugins:yammer 1.1.0...
de.tsystems.mms.apm:performance-signature-viewer (>=2.5.8, <=2.5.8.1), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.2.0-beta-1) +37 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (>=2.0, <=2.7)
org.jenkins-ci.plugins:token-macro MAVEN version =2.0, =2.5.8, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =0.3.0-beta-1, =1.1.0, =3.7.0, =1.1.7, =1.7.0, =2.0.0, =2.15, =2.18 and more Source cves: CVE-2019-10337 Source advisory: GHSA-G6H2-4X64-C59X...
com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.1.2, <=1.7.1) +42 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.5.1)
org.jenkins-ci.plugins:token-macro MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.1.2, =0.1, =3.6.0,...
CVE-2018-10337
CVE-2018-10337 entry is rejected/not used and does not represent an active vulnerability.
RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2019:1851)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1851 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.11 security update
An update for atomic-openshift and jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
RHEL 7 : OpenShift Container Platform 4.1 jenkins-2-plugins (RHSA-2019:1636)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1636 advisory. This advisory contains the jenkins-2-plugins RPM packages for Red Hat OpenShift Container Platform 4.1.4. See the following advisory for the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2019-10337
An XML external entities XXE vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side...
CVE-2019-10337
CVE-2019-10337 concerns an XML External Entity (XXE) vulnerability in the Jenkins Token Macro Plugin (versions 2.7 and earlier). The root cause is XXE processing when the ${XML} macro processes input, allowing an attacker who can influence the input file to trigger external entity resolution. Doc...
CVE-2019-10337
An XML external entities XXE vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side...
CVE-2017-10337
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10337
CVE-2017-10337 affects the Oracle Hospitality Suite8 (Oracle Hospitality Applications, Leisure subcomponent). Affected versions: 8.10.1 and 8.10.2. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, enabling unauthorized read access to a subset of data and...